Supply Chain Security Engineer

Project

Work done for a product or program.

• Define provenance and attestation architecture using device identity certificates such as IEEE 802.1AR DevID and TCG DICE.
• Secure key generation, injection and personalisation flows at wafer sort, OSAT and distributor programming sites, including HSM operation.
• Implement wafer and unit-level traceability with electronic chip ID, e-fuse serialisation and secure logging of provisioned counts.
• Prevent overproduction and grey-market diversion through token-controlled provisioning and reconciliation of test slot counts.
• Generate, sign and distribute SBOMs and hardware bills of materials per CycloneDX and SPDX, aligned with NIST SP 800-161 practice.
• Secure the firmware and IP build pipeline with signed artifacts, reproducible builds and SLSA-style provenance attestations.
• Run anti-counterfeit detection programmes with distributors and support DMSMS and obsolescence risk mitigation for defence customers.
• Support customer and regulator requests for provenance evidence including CRA and defence trusted-supply requirements.

Function

Work that keeps the discipline running: methods, tools, suppliers and people.

• Assess third-party IP and EDA supply chain risk, including code signing practices and vendor security posture.
• Audit subcontractor sites for physical security, mask and reticle handling, scrap control and secure material destruction.

Project

1. Produce and hand over the role's key deliverables
   • Provenance and device identity architecture specification
   • Secure provisioning flow design and site audit reports
   • Signed SBOM and provenance attestation pipeline
   • Serialisation and production reconciliation reports
   • Anti-counterfeit and scrap control procedures
2. Qualify the productGeneral
   • Write the qualification plan
   • Run stress tests and analyse the results
   • Approve the qualification report
3. Handle quality issuesGeneral
   • Analyse failures
   • Drive corrective and preventive action
   • Respond to customers

Function

1. Run the quality systemGeneral
   • Maintain procedures and records
   • Prepare for and run audits
2. Report and improveGeneral
   • Track quality metrics
   • Lead improvement projects